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Ill the Claims : 

Ploaso amend claims 39-57 and 60 - 63 as indicated below. 

1, (Previously presented) A network maiiagcment system, comprisitie: 

a gateway which is coupled to a plurality of managed objects and which is 
conHgurcd to deliver events generated by the managed objects to one or 
more managers or to deliver requests generated by the managers to one or 
more of the managed objects; and 

a piatforni-iiidcpcndent interface to the gateway, wherein the gateway is 
configurable to communicate witli the raajiagers through the platfomi- 
independenl interface to deliver the events or requests; 

wherein the gateway is configurable to provide object-level access conlrol 
between the managers and the managed objects to receive the events from 
or to send the requests to the managed objects, wherein said object-level 
access conlrol is provided at the individual object level so that one of the 
managers is granted access to one of the managed objects while being 
prevented from interfacing with a difrcrcnl one of the managed objects. 

2. (Original) Tho network management system of claim I. wherein the gateway 
is configurable to determine whether each of the managers is authorized to communicate 
with each of the managed objects. 

3. (Orighial) The network management system or claim I. wherein the gateway 
is configurable to authenticate the managers to receive the events fiom or to send the 
requests to the managed objects as a function of the identity of the managed object. 

4. (Original) The network management system of claim 1 , wherein the gateway 
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is configurable to authenticate the managers to receive the events or send the requests as 
a function of user IDs entered by users of the managers. 

5. (Original) I'he network management system of claim 1, wherein Iho events or 
requests are delivered by the gateway through the platfoi-m-independenl interface 
according to Internet Inter-Object Protocol (HOP). 

6. (Original) The network management system of claim 1, wherein tlic platform- 
independent interface to the gateway is expressed in an interface definition language, and 
whciein the interface definition language comprises a language for defining interfaces to 
Ihc managed objects across a plurality of platfonns and across a plurality of programming 
languages. 

7. (Original) The network management system of claim 6, wherein the interface 
definition language comprises OMG IDL. 

8. (Original) The network management system of claim I, wherein the managed 
objects comprise one or more objects corresponding to a telephone network. 

9. (Original) Itie network management system of claim 1, wherein the mai^agcd 
objects comprise an object corresponding to a telecommunications device. 

10. (Original) The network management system of claim 1, wherein the gateway 
is configurable to provide security audit trails. 

U. (Previously pi-esented) Tlie network management system of claim 10, 
wherein the gateway providing security audit trails comprises the gateway providing 
access to a logging service. 

12. (Previously presented) The network nianagement system of claim 11, 
wherein the logging service is operable to log an ID of a user that receives each event or 
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sends each request. 

13. (Previously presented) The network management system of claim 11, 
wherein Ihc logging scrviceis operable to log an ID of the managed object that is the 
source of each event or the target of each request. 

14. (Previously presented) The network management system of claim 11, 
wherein the logging service is operable to log a time at which each event or request is 
generated. 

15. (Previously presented) Tlic network management system of claim 11, 
wherein the logging service is operable to log a time at which each event or request is 
delivered. 

16. (Original) The network management system of claim 1, wherein the requests 
comprise a query for infonnation concerning one ofthe managed objects. 

17. (Original) iTie network management system of claim 1 , wherein the requests 
comprise a command to set one or more parameters of one of the managed objects. 

1 8. (Original) The network management system of claim 1, wherein the requests 
arc converted from the interface definition language to a Portable Management Interface 
(PM () format prior to delivery to the managed object.^, 

19. (Original) The network management system of claim 1 , wherein the requests 
arc converted from the interface dcfmilion language to a plairomi-specific format prior to 
delivery to the managed objects. 

20. (Previously presented) A network management method, comprising: 
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sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicato with tlie manager applicatioji 
through a platfoim-indepcndent interface; 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function of die identity of the user of the manager application, 
whereby access for the manager application to receive the event or send 
tlTc request is approved or denied for said one of the plurality of managed 
objecis at the individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager application or tlie request to the managed 
object iCthc manager access is approved. 

21. (Original) The network management method of claim 20. wherein the 
Ijatcway is conngurahlc to determine whether the manager is authorized to communicate 
with the managed object. 

22. (Original) The network management method of claim 20. wherein tl^e 
gateway is configurable to authenticate the manager to receive the event or send the 
request us a function as the identity of the managed object generating the event or 
receiving tlic request. 

23. (Original) The network management method of claim 20, wherein the 
gateway is configurable to authenticate the manager to receive the event or send the 
request as a function of a user ID entered by the user of the manager. 
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24. (Original) The network management meUioU of claim 20. wherein Ihc event 
or request is delivered by the gateway through the platform-independent interface 
jiccording to Internet Tntcr-0bjc5Ct Protocol (HOP). 

25. (Original) The nctworic management method of claim 20, wherein the 
plalfonn-indepcndent interface to the gateway is expressed in an interface definition 
language, and wherein the interface definition language comprises a language for 
defining interfaces to the managed objects across a plurality of platforms and across a 
plurality of programming languages. 

26. (Original) The network management method of claim 25, wherein the 
interface definition language comprises OMG IDL. 

27. (Original) The network management method of claim 20, wherein the 
anagcd object comprises an object corresponding to a telephone network. 



28. (Original) The network managemeiU method of claim 20, wherein the 
managed object comprises an object corresponding to a telecommunications device. 



29. (Original) The network management method of claim 20. wherein the 
gateway is configurable to provide security audit trails, 

30. (Original) The network majiagcnacnt method of claim 29. wherein the 
gateway providing security audit trails comprises the gateway providing access to a 
logging service. 

31. (Original) The network managenicnt method of claim 30, wherein Uie 
logging service is operable to log an ID of a user that receives the event or sends the 
request. 

32. (Original) The network management method of claim 30, wherein the 
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logging scvice is operable to log a,i ID of Ihc managed object that is the source of the 
event or the target of the request. 

33. (Original) The network management method of claim 30, wherein the 
logging service is operable to log a lime at which the eveiit or request is generated. 

34. (Original) The network management method of claim 30, wherein the 
logging service is operable to log a time at which the event or request is delivered. 

35. (Original) The network management mediod of claim 20, wherein the 
request comprises a query for information concerning the managed object. 

36. (Original) The network management method of claim 20, wherein the 
request comprises a command to set one or more parameters of the managed object. 

37. (Original) The network management method of claim 20, wherein the 
request is converted from the interface definition language to a Portable Management 
hilcrfaec (PMl) fonnat prior to delivery to the managed object. 

38. (Original) The network management method of claim 20, wherein the 
request is converted from the interface definition language to a plalfoim-spccific fomiat 
prior to delivery to the managed object. 

39. (CuiTently amended) A 6aff4e^laneihlR, computer ^cessiblg medium 
comprising computer p rogram instructions for network raajiageraent, wherein the 
program instructions are computer-executable to perform: 



send 



ding an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable U) communicate with the manager application 
through a platform-independent interface; 
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determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or 10 send a request to the one of the plurality of managed objects 
as a function of the identity of the user of the manager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of Uic plurah ty of managed 
objects at the individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to tlie manager application or the request to the managed 
object if the manager access is approved. 

40. (Currently amended) The «»=r»tf-tanp7ih1p,, computer accessible medium of 
claim 39, wherein the gateway is configurable to dctcnninc whether the manager is 
milhorized to communicate with the managed object. 

41. (Currently amended) The ^^*>«=««-ianmV>1ft, computer accessible medium of 
claim 39, wherein the gateway is configurable to authenticate the manager to receive the 
event or send the request as a function as the identity of the managcti object generating 
the event or receiving the request. 

42. (Currently amended) The eaH4e^-^ailsMCi-SomE".tc'' accessible medium of 
claim 39, wherein the gateway is configurable to authenticate the manager to receive the 
event or send the request as a fimction of a user ID entered by the user of the manager. 

43. (Currently amended) Tlic ^°=i.*«^tangiblf^ c<->mpuier accessible medium of 
claim 39, wherein the event or request is delivered by the gateway through the plalform- 
inilepcndent interface according to Internet Intcr-Objecl Protocol (UOP). 
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44. (Currently amended) TVif f^^l^^pih^^-, ^-nmnutcr accessible medium of 
claim 39, wherein the platfomi-independciit interface to the gateway is expressed in an 
inicvfacc definition latiguagc, and wherein the interface definition language cotnpriscs a 
language for denning interfaces to the ntianaged objects across a plurality of plalfonns 
and iicross a plurality of programming languages. 

45. (CiuTcntly amended) The €«ffler^tangib.le,_con.ipjjig!iac medium of 
claim 44, wherein the interface definition language comprises OMG IDL. 

46. (Cuncntly amended) The earfief-tangihlc, computer accessible medium of 
claim 39, wherein the managed object comprises an object corresponding to a telephone 
nctwork- 

47. (Currently amended) The ^^atrwM^tj^ncihle. computer acccsisiblc medimn of 
claim 39, wherein the managed object comprises an object corresponding to a 
IclccommunicatioTis device. 

48. (Currently amended) The ix..xri^tnnf.^hift, rrMnputcr accessible medium of 
claim 39, wherein the gateway is configurable to provide security audit trails. 

49. (Currently amended) ThP ..a..A>i^iMnf>ihle. computer accessible medium of 
claim 48, wherein the gateway providing security audh trails comprises the gateway 
providing access to a logging service. 

50. (Currently amended) Th^ «ta«a^ianfirihlc. computer accessible medium of 
claini 49, wherein the logging service is operable to log an ID of a user that receives the 
event or sends the request. 

51. (Currcnlly amended) The ^^-^r-tnn^ihlP., computer accessible medium of 
claim 49, wherein the logging service is operable to log an ID of the managed object that 
is the source of the event oc the target of the request, 
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52. (Currently aiTiendcd) The ^^^p4^-t:.npiMp, mmputcr accessible medium of 
claim 49, wherein the logging service is operable to log a time at which the event or 
request is ecneralcd. 

53. (Currently amended) Th.. ^^^^^^^^tan^'Mc. comnutei- accessible medium of 
claim 49, wherein Ihe logging service is operable to log a lime at which the event or 
request is delivered. 

54. (Currently amended) The «»«i^r..tnnffihlft, computer acce.ssiblc medium of 
elaini 39, wherein the request comprises a query for infonnatioD concerning the managed 
object, 

55. (Currently amended) The cftmei^tMgibJ.gi..comEuter accessible medium of 
claim 39, wherein the request comprises a command to set one or more parameters of the 
managctl object, 

56. (Currently amended) The ftftrrW-H^taneihlc. comnuter accessible medium of 
claim 39, wherein the request is converted from the interface definition language to a 
Portable Management Interface (PMI) format prior to delivery to the managed object. 

57. (Currently amended) The «^<Mi-tanBiblc- computer accessible medium of 
claim 39, wherein the request is converted from die interface definition language lo a 
platfonn-specific format prior to delivciy to the managed object. 

58. (Previously presented) A network management system, comprising: 

a gateway which is coupled to a plurality of managed objects and which is 
conrifiured to deliver events generated by the managed objects to one or 
more managers or to deliver requests generated by the managers to one or 
more of the managed objects; and 
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a plairorm-indcpcndent interface to the gateway, wherein the gateway is 
configurable to comtntinicatc with the managers through the platfonn- 
indcpendcnt inlerface to deliver the events or requests; 

wherein the gateway is configurable to provide object-level access control 
between the managers and the managed objects to receive the events from 
or to send the requests to the managed objects, wherein said object-level 
access control is provided at the individual object level so that one of the 
managers is granted access to one of the managed objects while being 
prevented from interfacing with a different one of the managed objects, 
and wherein the managers use a request Service Access Point (SAP) for 
requests and responses. 

59. (Previously presented) A network management method, comprising; 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the manager application 
through a platform-independent interface; 

dctciTOining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of majiaged objects 
as a fimction of the identity of the user of the manager application, 
whereby access for tlie manager application to receive the event or send 
the request is approved or denied for said one of tlic plurality of managed 
objects at the individual object level ho that the manager application is 
granted access 10 one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 
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delivering the event to the manager application or the request lo the managed 
object if the manager aecess is approved; 

wherein the manager application uses a request Service Access Point (SAP) for 
requests and responses. 

60. (Currently amended) A 6arrie^tangiblc._comBute]^ hie medium, 
comprising comput er program instructions for network management, wherein the 
program instniclions are compuler-execulablc to perform: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with the majiagcr application 
through a platform-independent interface; 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a pluralily of managed 
objects or to send a request to the one of the plurality of managed objects 
as a funeUon of the identity of the user of the matiager application, 
whereby access for the manager application to receive the event or send 
the request is approved or denied for said one of the plurality of managed 
objects at the imlividual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of the plurality of managed 
objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is approved; 

wherein the manager application uses a request Service Access Point (SAP) for 
requests and responses. 
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61. (Ciu-reiUly amended) A network manaeement system, comprisidfi: 

a gateway which is coupled to a plurality of managed objects and which is 
configured to deliver events generated by the managed objects to one or 
more managers or to deliver requests generated by the managers to one or 
more of the managed objects; 

a plairorm-indcpendent interface to the gateway, wherein the gateway i.s 
configurable to communicate with the managers tliroiigh the platfomv 
indepcndent interface to deliver the events or requests; 

wherein the gateway is configurable to provide object-level access control 
between the managers and the managed objects to receive the events from 
or to send the requests to the managed objects, wherein said object-level 
access control is provided at the individual object level so that one of the 
managers is granted access to one of the managed objects while being 
prevented from interfacing with a different one of the managed objects; 
and 

wherein the gateway uses a singleton SAP object that sliares all ProxyAgcnts 
through which a manager deals with a managed object and allows llw 
insertion of the abuser name in the-rcqucst Biessage messages .to enforce 
objcct-lcvcl access control. 

62. (Currently amended) A network management mctliod, comprising: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with tlie manager application 
through a platform-independent interface; 
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determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
objects or to send a request to the one of the plurality of managed objects 
as a function ofthe identity of the user of the manager application; 

whereby access for the manager application to receive the event or send the 
request is approved or denied for said one of the plurality of managed 
objects at the individual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of Uie plurality of managed 
objects; and 

delivering the event to the manager application or the request to the managed 
object if the manager access is approved; and 

wherein the gateway uses a singleton SAP object that shares all ProxyAgcnts 
through which the manager deals with a managed object and allows 4he 
insertion ofthe a_user name in tHe-requcst message mcssagt5S_to enforce 
object-level access control. 

63. (Currcntly amended) A «»»=l.^t!ingihle. computer accessibjc medium, 
comprising computer p rogram instructions for network management, wherein the 
program instructions arc computer-executable to peiform: 

sending an identity of a user of a manager application to a gateway, wherein the 
gateway is configurable to communicate with tlie manager application 
through a platform-independent interface; 

determining on a managed object level whether or not the manager application is 
allowed to receive an event generated by one of a plurality of managed 
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objects or lo send a request to the one of the plurality of manaficd objects 
as a function of the identity oflhc user of the manager application; 

whereby access for the manager application lo receive the event or send the 
request is approved or denied for said one of tlie plurality of managed 
objects at Ihc iudividual object level so that the manager application is 
granted access to one of the plurality of managed objects while being 
prevented from interfacing with a different one of tlie plurality of managed 
objects; and 

delivering the event lo tlie vnanager application or the request to Ihe managed 
object if the manager access is appiwed; and 

wherein the gateway uses a singleton SAP object that shares all ProxyAgents 
through which the manager deals wilh a managed object and allows the 
insertion of the a.uscr name in the-requesl mosoag e messagcsjo enforce 
objcct-lcvcl access control. 



Mcytrtons, Hood. Kivlin, Kowci t & OiictzcV l*.t:. 



IS 



09/556.068 (5I«l-4840(VP4500) 



PAGE 16118 ' RCVD AT 7/1 112005 2:18:36 PM [Eastern Daylight Time] ' SVR:USPT0{F)(RF-1H * DNIS:872930S * CSID: ' DURATION ([nm-ss):09-18 



